Starbucks

"We may collect information about the precise location of your device (e.g., GPS latitude and longitude), consistent with your device settings. We may also use location-based technology in or around our retail locations to collect information about the presence of your device, if your Bluetooth is turned on and your device settings allow for this."

Starbucks collects precise GPS geolocation and uses Bluetooth-based proximity detection to track device presence in and around retail locations, enabling continuous location monitoring when permissions are granted.

"Identifiers – We may collect information that can be used to identify you, such as your first and last name, phone number, your address book, email address, postal address, IP address, and the day and month of your birthday. ... we may collect audio and visual information when you use the Starbucks Services. For example, some of our retail locations may have cameras installed for security and operational purposes."

Starbucks collects the user's address book (contacts), unique device identifiers, hardware model details, and audio/visual information — data that goes beyond what is strictly necessary for ordering coffee.

"We may share each of the categories of information described above (in the "Information We Collect" section) with marketing, advertising and analytics providers to deliver advertising to you on behalf of Starbucks, including counting ad impressions, creating ad audiences, and conducting personalized advertising based on your interactions with our services as well as your activity on third-party services."

Starbucks shares all categories of collected personal information — identifiers, financial info, transaction history, device activity, geolocation, and inferences — with advertising and analytics providers for personalized advertising.

"We may process your information to provide you with targeted advertising (also known as cross-contextual advertising and online behavioral advertising) and offers and promotions that you may be interested in. ... conducting personalized advertising based on your interactions with our services as well as your activity on third-party services."

Starbucks engages in cross-contextual advertising by combining user activity across its own services with activity on third-party services to build advertising profiles and deliver targeted ads.

"We may update this Notice from time to time. We will notify you of material changes to this Notice and will update the Last Revised date on this Notice. We encourage you to look for updates and changes to this Notice when you access our websites and mobile applications."

Starbucks reserves the right to update the privacy notice at any time, placing the burden on users to check for changes when they access the services, with continued use constituting acceptance.

"Starbucks stores information as reasonably necessary and proportionate to accomplish the purposes identified in this Notice based on criteria such as the length of time we need to provide the services to you, and to meet legal requirements, including record retention, resolving disputes, and enforcing our agreements. Our retention of your information is governed by applicable law."

Starbucks provides no specific retention periods or deletion timelines, using vague language like "reasonably necessary" which effectively allows indefinite data retention.